Forum Discussion
swo0sh_gt_13163
Mar 09, 2014Altostratus
Hello Folks,
Got a similar one, thought to share.
when HTTP_REQUEST {
set hostvar [HTTP::host]
set urivar [HTTP::uri]
set ipvar [IP::client_addr]
}
when HTTP_RESPONSE {
if { [HTTP::status] starts_with "5" } {
log local0. "$ipvar requested $hostvar $urivar and received a [HTTP::status] from [IP::server_addr]" }
}